Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
File: R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json)
Hash identifier: LRNt+hWoHG9j4w0TGG5I/gkhCQnXyXy7jRz/bMk9zD4=
Subject key identifier: 3C:D4:36:4B:5A:E4:85:21:0A:EE:57:DC:57:EE:F8:1B:E1:25:23:A3
Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
Certificate issuer: /CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Certificate serial: 019DA3AECF12AD384F8B599F55F53B92DEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
Manifest number: 0864
Signing time: Sun 19 Apr 2026 03:00:35 +0000
Manifest this update: Sun 19 Apr 2026 03:00:35 +0000
Manifest next update: Mon 20 Apr 2026 03:00:35 +0000
Files and hashes: 1: 6gLUsBkG-831LvTIKcOMB6anenc.roa (hash: 0P++i0Px+QNc8KIJpDVgXYAXiNKGP7NiivE2XFE/A70=)
2: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: yCe+JnDykYr8kHzBbz4ee1W3r3FwvP8xAeAfUigYUC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:cf:12:ad:38:4f:8b:59:9f:55:f5:3b:92:de:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Validity
Not Before: Apr 19 03:00:35 2026 GMT
Not After : Apr 20 03:00:35 2026 GMT
Subject: CN=3cd4364b5ae485210aee57dc57eef81be12523a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:73:b5:96:98:79:20:6e:13:14:57:79:86:34:
d9:f2:26:35:2b:fb:10:60:e1:28:56:76:ba:22:51:
ab:b0:b8:ad:36:b5:6a:8f:59:c1:9e:08:62:cf:66:
43:c6:42:da:30:53:9f:0f:8f:87:3f:cb:fc:6d:b3:
6d:d8:1b:b6:f3:55:a1:ae:e7:3d:5c:8e:b2:53:7d:
c8:b1:b6:ae:a5:5c:2e:99:81:63:80:66:72:1d:59:
22:e6:21:b8:b8:a1:d6:fe:81:e3:33:36:b9:18:52:
23:55:44:a1:7b:d8:0c:51:b8:e5:65:23:46:fb:43:
a0:86:67:45:eb:ba:b4:78:4b:c7:49:42:4a:ae:c6:
d1:68:62:76:29:05:1f:60:5c:e0:32:63:30:95:2e:
b5:8c:4b:ec:fd:a4:d8:5b:cd:53:a3:24:ef:27:43:
fb:b2:05:c9:48:1d:69:3a:c4:4a:57:8b:ca:07:08:
8d:19:01:c4:78:dc:7b:ab:13:8a:60:eb:22:cf:a3:
7d:3c:d6:70:bc:04:74:07:62:84:20:99:52:d7:2e:
9f:99:d6:17:d1:8c:ef:58:81:0f:d9:da:c3:4c:47:
fc:76:15:a4:e7:bd:49:e2:d6:71:4d:c5:16:11:13:
c5:1d:2c:93:79:a7:4f:b2:fd:e3:be:8c:7a:a9:23:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D4:36:4B:5A:E4:85:21:0A:EE:57:DC:57:EE:F8:1B:E1:25:23:A3
X509v3 Authority Key Identifier:
keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:08:e2:72:00:34:c9:4f:a6:e3:dc:31:67:81:6c:c9:82:ab:
2a:d0:b0:6e:37:8e:74:62:4c:16:23:84:ed:2f:0f:e6:74:98:
69:ef:e3:84:c5:75:58:3b:81:b7:35:a6:19:33:9e:7d:bc:d9:
89:9b:5b:81:c1:32:45:68:61:2b:61:ec:ed:ed:e0:17:4a:49:
e1:6a:5a:a8:82:59:49:37:d2:33:24:7e:ee:7b:c5:96:40:3d:
0b:28:4d:cf:11:84:c2:4f:95:56:4a:b6:15:15:c2:cb:bb:f6:
5f:02:47:f5:7b:ed:8d:cf:6f:4d:74:af:6b:6e:80:07:ea:d8:
7d:0f:52:fa:f3:95:c0:99:f2:0d:a8:68:94:7e:b1:32:50:85:
c8:e2:e0:ac:b0:ef:ed:4b:7d:ce:5a:ca:1f:74:43:64:00:bb:
93:8e:41:a8:f8:0c:41:d2:dc:3c:67:5b:d7:48:f5:4f:15:79:
fa:8a:6e:52:d6:ba:61:a3:4c:3b:3d:ca:01:40:d6:44:a2:96:
6e:08:77:d8:98:75:8c:17:04:a6:a0:34:54:85:be:85:90:14:
e6:b8:da:6a:28:52:cd:b9:7f:7f:f6:ae:75:82:3a:92:e0:88:
03:74:86:1d:c4:b6:a1:3e:38:8f:89:d6:e7:00:c1:4d:57:5b:
8b:aa:f6:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrs8SrThPi1mfVfU7kt62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZWVmZmMyNzE0NjI0YjkyMzdkYWRlNTNmYmQyNDQxZjQx
OTJhYzcwHhcNMjYwNDE5MDMwMDM1WhcNMjYwNDIwMDMwMDM1WjAzMTEwLwYDVQQD
EygzY2Q0MzY0YjVhZTQ4NTIxMGFlZTU3ZGM1N2VlZjgxYmUxMjUyM2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nO1lph5IG4TFFd5hjTZ8iY1K/sQ
YOEoVna6IlGrsLitNrVqj1nBnghiz2ZDxkLaMFOfD4+HP8v8bbNt2Bu281Whruc9
XI6yU33IsbaupVwumYFjgGZyHVki5iG4uKHW/oHjMza5GFIjVUShe9gMUbjlZSNG
+0OghmdF67q0eEvHSUJKrsbRaGJ2KQUfYFzgMmMwlS61jEvs/aTYW81ToyTvJ0P7
sgXJSB1pOsRKV4vKBwiNGQHEeNx7qxOKYOsiz6N9PNZwvAR0B2KEIJlS1y6fmdYX
0YzvWIEP2drDTEf8dhWk571J4tZxTcUWERPFHSyTeadPsv3jvox6qSN6zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzUNkta5IUhCu5X3Ffu+BvhJSOjMB8GA1UdIwQY
MBaAFEfu/8JxRiS5I32t5T+9JEH0GSrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMt
ZDQ5OTIzYTE1ZmQ5LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMtZDQ5OTIzYTE1ZmQ5
LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAjicgA0
yU+m49wxZ4FsyYKrKtCwbjeOdGJMFiOE7S8P5nSYae/jhMV1WDuBtzWmGTOefbzZ
iZtbgcEyRWhhK2Hs7e3gF0pJ4WpaqIJZSTfSMyR+7nvFlkA9CyhNzxGEwk+VVkq2
FRXCy7v2XwJH9Xvtjc9vTXSva26AB+rYfQ9S+vOVwJnyDaholH6xMlCFyOLgrLDv
7Ut9zlrKH3RDZAC7k45BqPgMQdLcPGdb10j1TxV5+opuUta6YaNMOz3KAUDWRKKW
bgh32Jh1jBcEpqA0VIW+hZAU5rjaaihSzbl/f/audYI6kuCIA3SGHcS2oT44j4nW
5wDBTVdbi6r20Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:26 2026 by rpki-client